Fault detection and localization using combinatorial test design techniques while adhering to architectural restrictions

ABSTRACT

Systems, methods, and computer-readable media are described for performing fault detection and localization using Combinatorial Test Design (CTD) techniques and generating a regression bucket of test cases that expose a detected fault in a System Under Test (SUT). The SUT may be a hardware system or a software system. Further, the fault detection and localization may be performed while adhering to architectural restrictions on the SUT.

BACKGROUND

The present invention relates generally to fault detection and localization to generate failing test cases, and more particularly, to utilizing combinatorial test design to detect and localize a fault and to generate a regression bucket of failing test cases corresponding to the fault.

Combinatorial Test Design (CTD) is a testing methodology that seeks to increase test space coverage for a System Under Test (SUT) through the use of automated algorithms. These algorithms identify input patterns that are most likely to locate problems in the SUT, thereby reducing the amount of time required for a tester to build test cases and an automation framework. CTD is well-adapted for projects that require numerous variations on static input vectors to properly test various system states and logic pathways, which would otherwise be extremely cumbersome for a human tester. Despite this, CTD testing techniques suffer from various drawbacks, technical solutions to which are described herein.

SUMMARY

In one or more example embodiments, a method for detecting and localizing a fault in a System Under Test (SUT) while adhering to one or more architectural restrictions on the SUT is disclosed. The method includes modeling inputs to the SUT as a collection of attribute-value pairs and reducing a Cartesian product space comprising all possible combinations of the attribute-value pairs to a reduced test space at least in part by excluding one or more combinations of attribute-value pairs that violate at least one of the one or more architectural restrictions. The method further includes generating an initial set of test vectors that provides complete n-wise coverage of the reduced test space, generating an initial set of test cases from the initial set of test vectors, and executing the initial set of test cases to obtain a first set of execution results. The method further includes determining, based at least in part on the first set of execution results, that one or more test cases failed execution and generating a set of new test cases from a selected failing test case. Generating the set of new test cases includes generating, in relation to each attribute in the selected failing test case, a respective subset of new test cases at least in part by changing a respective attribute value for the attribute in the selected failing test case to each other candidate attribute value for the attribute that is not present in any of the one or more test cases that failed execution. The method additionally includes executing the set of new test cases to obtain a second set of execution results and detecting and localizing the fault based at least in part on the second set of execution results.

In one or more other example embodiments, a system for detecting and localizing a fault in a System Under Test (SUT) while adhering to one or more architectural restrictions on the SUT is disclosed. The system includes at least one memory storing computer-executable instructions and at least one processor configured to access the at least one memory and execute the computer-executable instructions to perform a set of operations. The operations include modeling inputs to the SUT as a collection of attribute-value pairs and reducing a Cartesian product space comprising all possible combinations of the attribute-value pairs to a reduced test space at least in part by excluding one or more combinations of attribute-value pairs that violate at least one of the one or more architectural restrictions. The operations further include generating an initial set of test vectors that provides complete n-wise coverage of the reduced test space, generating an initial set of test cases from the initial set of test vectors, and executing the initial set of test cases to obtain a first set of execution results. The operations further include determining, based at least in part on the first set of execution results, that one or more test cases failed execution and generating a set of new test cases from a selected failing test case. Generating the set of new test cases includes generating, in relation to each attribute in the selected failing test case, a respective subset of new test cases at least in part by changing a respective attribute value for the attribute in the selected failing test case to each other candidate attribute value for the attribute that is not present in any of the one or more test cases that failed execution. The operations additionally include executing the set of new test cases to obtain a second set of execution results and detecting and localizing the fault based at least in part on the second set of execution results.

In one or more other example embodiments, a computer program product for detecting and localizing a fault in a System Under Test (SUT) while adhering to one or more architectural restrictions on the SUT is disclosed. The computer program product includes a non-transitory storage medium readable by a processing circuit, the storage medium storing instructions executable by the processing circuit to cause a method to be performed. The method includes modeling inputs to the SUT as a collection of attribute-value pairs and reducing a Cartesian product space comprising all possible combinations of the attribute-value pairs to a reduced test space at least in part by excluding one or more combinations of attribute-value pairs that violate at least one of the one or more architectural restrictions. The method further includes generating an initial set of test vectors that provides complete n-wise coverage of the reduced test space, generating an initial set of test cases from the initial set of test vectors, and executing the initial set of test cases to obtain a first set of execution results. The method further includes determining, based at least in part on the first set of execution results, that one or more test cases failed execution and generating a set of new test cases from a selected failing test case. Generating the set of new test cases includes generating, in relation to each attribute in the selected failing test case, a respective subset of new test cases at least in part by changing a respective attribute value for the attribute in the selected failing test case to each other candidate attribute value for the attribute that is not present in any of the one or more test cases that failed execution. The method additionally includes executing the set of new test cases to obtain a second set of execution results and detecting and localizing the fault based at least in part on the second set of execution results.

BRIEF DESCRIPTION OF THE DRAWINGS

The detailed description is set forth with reference to the accompanying drawings. The drawings are provided for purposes of illustration only and merely depict example embodiments of the invention. The drawings are provided to facilitate understanding of the invention and shall not be deemed to limit the breadth, scope, or applicability of the invention. In the drawings, the left-most digit(s) of a reference numeral identifies the drawing in which the reference numeral first appears. The use of the same reference numerals indicates similar, but not necessarily the same or identical components. However, different reference numerals may be used to identify similar components as well. Various embodiments may utilize elements or components other than those illustrated in the drawings, and some elements and/or components may not be present in various embodiments. The use of singular terminology to describe a component or element may, depending on the context, encompass a plural number of such components or elements and vice versa.

FIG. 1 is a schematic hybrid data flow/block diagram illustrating fault detection and localization using Combinatorial Test Design (CTD) techniques and generation of a regression bucket of failing test cases that expose a detected fault in accordance with one or more example embodiments of the invention.

FIG. 2 is a schematic diagram of an example CTD vector in accordance with one or more example embodiments of the invention.

FIG. 3 is a schematic depiction of the expansion of new test cases from a selected failing test case using inverse combinatorics in accordance with one or more example embodiments of the invention.

FIG. 4 is a process flow diagram of an illustrative method for detecting and localizing an n-wise fault using CTD techniques and generating a regression bucket of failing test cases that expose the detected n-wise fault in accordance with one or more example embodiments of the invention.

FIG. 5 is a process flow diagram of an illustrative method for detecting and localizing an n-wise fault using CTD techniques and generating a regression bucket of test cases that expose the detected n-wise fault while adhering to architectural restrictions in accordance with one or more example embodiments of the invention.

FIG. 6 is a schematic diagram of an illustrative computing device configured to implement one or more example embodiments of the invention.

DETAILED DESCRIPTION

Example embodiments of the invention relate to, among other things, devices, systems, methods, computer-readable media, techniques, and methodologies for performing fault detection and localization using Combinatorial Test Design (CTD) techniques and generating a regression bucket of test cases that expose the detected fault. In example embodiments, the detected and localized fault occurs in a System Under Test (SUT). The SUT may be a hardware system or a software system. Further, in example embodiments, the fault detection and localization may be performed while adhering to architectural restrictions on the SUT.

In example embodiments, inputs to a SUT are modeled as a collection of attribute-value pairs. More specifically, inputs to a SUT can be modeled as a collection of attributes, each of which can take on one or more corresponding attribute values. In example embodiments, the entire Cartesian product space that contains all possible combinations of attribute-value pairs can be reduced to a smaller set of test vectors that provides complete n-wise coverage of the entire test space. For instance, if it is assumed that four different attributes A, B, C, and D are modeled, and if it is further assumed that attribute A can take on four distinct values; attribute B can take on three distinct values; attribute C can take on three distinct values; and attribute D can take on two distinct values, then the total number of possible combinations of attribute-value pairs would be 4*3*3*2=72. Thus, in this illustrative example, the entire Cartesian product space would include 72 different combinations of attribute-value pairs. As previously noted, these 72 different combinations of attribute-value pairs can be reduced down to a smaller set of combinations that still provide complete n-wise coverage of the Cartesian product space. For instance, referring to the same example introduced above, if complete pairwise coverage is sought, then the 72 different combinations can be reduced down to 12 distinct combinations that together include every possible pairwise interaction of attribute values. The reduced number of combinations required to provide n-wise coverage may increase logarithmically as n increases.

In example embodiments, the entire Cartesian product space including all combinations of attribute-value pairs is reduced down to a smaller set of CTD test vectors that provides complete n-wise coverage for a desired n. In complex hardware or software systems, the total number of attributes and corresponding candidate attribute values may be quite large, in which case, the total number of possible combinations of attribute values making up the entire Cartesian product space may be astronomically large, making it practically infeasible to test all possible combinations. Reduction of the entire Cartesian product space down to a substantially smaller number of CTD test vectors that still provide complete n-wise coverage allows for any n-wise (or m-wise where m<n) fault to be detected without having to directly test every possible combination in the test space.

In example embodiments, a binary decision diagram or the like may be used to perform the reduction and identify the reduced set of CTD vectors that provides complete n-wise coverage. In example embodiments, each CTD test vector that is generated includes a unique combination of attribute values, and the set of CTD test vectors together include every possible n-wise interaction of attribute values. In particular, each CTD vector may have a dimension corresponding to the number of attributes that are modeled, where each element of the CTD vector is a respective attribute value for a corresponding attribute. The set of CTD vectors that is generated, however, may not be unique. That is, there may be multiple different sets of CTD vectors, each of which provides complete n-wise coverage. In example embodiments, the CTD vectors may be chosen at random while still ensuring complete n-wise coverage. In other example embodiments, the initial set of CTD vectors may be chosen with specific criteria in mind such as, for example, to increase or decrease the representation of particular attribute values within the set of CTD vectors.

In example embodiments, once the initial set of CTD test vectors are generated, they are used to generate a corresponding set of test cases. For instance, the set of CTD test vectors may be provided as input to a test case generation tool configured to generate a respective corresponding test case for each CTD vector. Each test case may be designed to test the interactions among the particular combination of attribute values contained in the corresponding CTD vector.

In example embodiments, the test cases are then executed. In example embodiments, execution of each test case results in either a successful execution result, indicating that the combination of attribute values associated with the test case does not contain an n-wise (or m-wise where m<n) error, or a failure execution result, indicating that the combination of attribute values associated with the test case do contain an n-wise (or m-wise where m<n) error. In example embodiments, a particular failing test case is then selected and inverse combinatorics is applied to the failing test case to produce a new set of test cases capable of exposing the bug. In example embodiments, application of inverse combinatorics to the selected failing test case includes generating a respective new test case with respect to each attribute. Thus, the number of new test cases generated may be equal to the number of attributes. In example embodiments, in each new test case, the attribute value of a corresponding attribute in the selected failing test case is changed to an attribute value for that attribute that is not present in any failing test case and the respective attribute value for each other attribute is unchanged from that which is present in the selected failing test case.

Those new test case(s) that yield a successful execution result may then be assessed to detect and localize the n-wise (or m-wise where m<n) error. In particular, the specific attribute-value pairs that cause the error may be identified based on those new test cases that successfully execute. A regression bucket of test cases may then be generated based on the error-producing combination of attribute-value pairs. More specifically, every possible combination of attribute values that include the attribute values determined to cause the error may be determined and a regression bucket of corresponding test cases for testing these combinations can be outputted for use by a manual tester, for example. In particular, in example embodiments, all test cases contained in the regression bucket will fail when executed until the bug is fixed, after which all regression bucket test cases should pass (i.e., produce a successful execution result).

In example embodiments, architectural restrictions may apply to the SUT. Architectural restrictions may include any of a variety of restrictions on inputs to the SUT. For instance, an example restriction may be that if a given attribute has a particular attribute value, then one or more other attributes are excluded from having certain attribute value(s). Another example architectural restriction may be that if a given attribute has a particular attribute value, then one or more other attributes must have certain attribute value(s). Yet another example architectural restriction may be that a new attribute is introduced if and only if a particular attribute has a particular attribute value. It should be appreciated that the above examples of architectural restrictions are merely illustrative and not exhaustive.

In example embodiments, architectural restrictions are taken into account prior to performing the reduction of the entire Cartesian space down to the initial set of CTD vectors that provides the desired complete n-wise coverage. That is, in example embodiments, particular combinations of attribute values that violate any architectural restrictions are first excluded from the Cartesian product space, and then the reduction down to the set of CTD vectors that provides complete desired n-wise coverage is performed. In this manner, it can be ensured that no combination of attribute values that violates an architectural restriction is included in the initial set of CTD vectors. Further, in example embodiments, when a selected test case corresponding to an initial CTD vector fails and is selected for expansion to obtain a set of new test cases designed to detect and localize an n-wise error, that expansion can be performed first without taking into account any architectural restrictions. Then, any new test cases that violate an architectural restriction can be excluded. In this manner, it can be ensured that the expansion provides as much coverage of the test space in the neighborhood around the failing test case as possible. In addition, in example embodiments, the regression bucket of failing test cases may first be generated without regards to architectural restrictions, and then any test cases that violate an architectural restriction can be excluded from the regression bucket. That is, test cases corresponding to all possible combinations in the entire Cartesian product test space that include the particular combination of attribute values causing an n-wise or lesser order error may first be generated and then reduced down to exclude any test case(s) that violate a restriction. Alternatively, the test cases included in the regression bucket may be selected from the reduced Cartesian space from which the initial set of CTD vectors are selected, in which case, the regression bucket would be generated to include only those combinations of attribute values that include the subset of attribute values causing the error and that do not violate any architectural restriction.

Example embodiments of the invention include various technical features that yield technical effects that provide various improvements to computer technology. For instance, example embodiments of the invention include the technical feature of inverse combinatorics to expand a set of test cases from a selected failing test case. This technical feature allows for an n-wise or lesser order fault to be detected and localized within a single iteration of the expansion. This technical effect represents an improvement to debugging and fault detection computer technology because it automates the creation of additional test cases around a selected failing test case in a manner that is specifically designed to facilitate detection and localization of a fault. Thus, the automated generation of new test cases in accordance with example embodiments of the invention is capable of exposing a fault more efficiently and using a fundamentally different methodology than manual test case generation. Example embodiments of the invention also include the technical feature of generating a regression bucket of test cases that tests every possible combination of attribute values that includes the particular subset of attribute values causing the n-wise fault. Thus, the regression bucket includes only test cases that would all fail prior to correction of the fault and that would all pass after correction of the fault. Thus, the automated generation of a regression bucket of failing test cases in accordance with example embodiments of the invention provides an improvement to computer technology by providing a tester or automated testing algorithm with a set of test cases—each of which is ensured to fail—such that the tester or automated testing algorithm can use the regression bucket of test cases to verify that a fault has been corrected when all test cases ultimately pass after debugging is performed.

FIG. 1 is a schematic hybrid data flow/block diagram illustrating fault detection and localization using CTD techniques and generation of a regression bucket of failing test cases that expose a detected fault in accordance with one or more example embodiments of the invention. FIG. 4 is a process flow diagram of an illustrative method 400 for detecting and localizing an n-wise fault using CTD techniques and generating a regression bucket of failing test cases that expose the detected n-wise fault in accordance with one or more example embodiments of the invention. FIG. 4 will be described in conjunction with FIG. 1 hereinafter.

Illustrative methods in accordance with example embodiments of the invention and corresponding data structures (e.g., program modules) for performing the methods will now be described. It should be noted that each operation of the method 400 depicted in FIG. 4 and/or the method 500 depicted in FIG. 5 may be performed by one or more of the program modules or the like depicted in FIG. 1 or FIG. 6, whose operation will be described in more detail hereinafter. These program modules may be implemented in any combination of hardware, software, and/or firmware. In certain example embodiments, one or more of these program modules may be implemented, at least in part, as software and/or firmware modules that include computer-executable instructions that when executed by a processing circuit cause one or more operations to be performed. A system or device described herein as being configured to implement example embodiments may include one or more processing circuits, each of which may include one or more processing units or nodes. Computer-executable instructions may include computer-executable program code that when executed by a processing unit may cause input data contained in or referenced by the computer-executable program code to be accessed and processed to yield output data.

Referring first to FIG. 4 in conjunction with FIG. 1, in example embodiments, at block 402 of the method 400, inputs to a SUT are modeled as a collection of attribute value pairs 102. Any number of attributes may be used to model SUT inputs and each attribute may take on any number of candidate attribute values. At block 404 of the method 400, in example embodiments, computer-executable instructions of one or more n-wise coverage CTD vector generation modules 104 are executed to generate an initial set of CTD vectors 106 that provides n-wise coverage of an entire Cartesian product space associated with the collection of attribute-value pairs 102.

In particular, the entire Cartesian product space that contains all possible combinations of the attribute-value pairs 102 is reduced to a smaller set of CTD test vectors 106 that provides complete n-wise coverage of the entire test space. In example embodiments, the complete n-wise coverage provided by the set of CTD vectors 106 may be complete pairwise coverage. For instance, if it is assumed that three attributes are modeled, namely, a “name” attribute, a “color” attribute, and a “shape” attribute as shown in FIG. 3, and if it is further assumed that the “name” attribute can take on 4 distinct attributes (Dale, Rachel, Andrew, and Ryan), the “color” attribute can take on 2 distinct attributes (green, blue), and the “shape” attribute can take on 3 distinct attributes (circle, square, triangle), then the total number of possible combinations of attribute-value pairs would be 4*3*2=24. Thus, in this illustrative example, the entire Cartesian product space would include 24 different combinations of attribute-value pairs. In example embodiments, these 24 different combinations of attribute-value pairs are reduced down to a smaller set of combinations (i.e., the set of CTD vectors 106) that still provides complete n-wise coverage of the Cartesian product space. For instance, if complete pairwise coverage is sought, then the 24 different combinations can be reduced down to 12 distinct combinations that together include every possible pairwise interaction of attribute values. An example set of CTD vectors 300 is shown in FIG. 3. The example set of CTD vectors 300 includes all pairwise interactions between the attribute values of the attributes “name,” “color,” and “shape.”

In example embodiments, a binary decision diagram or the like may be used to perform the reduction and identify the reduced set of CTD vectors 106 that provides complete n-wise coverage. While each CTD vector in the set of CTD vectors 106 includes a unique combination of attribute values, the set of CTD vectors 106 itself may not be unique. That is, there may be multiple different sets of CTD vectors, each of which provides complete n-wise coverage. For instance, while FIG. 3 depicts an example set of CTD vectors 300 for the example attributes and attribute values described, it should be appreciated that alternative sets of CTD vectors that include different combinations of attribute values may also independently provide complete n-wise coverage. It should further be appreciated that while the example set of CTD vectors 300 provides complete pairwise coverage and partial three-wise coverage, a greater number of CTD vectors would be needed to provide complete three-wise coverage. Stated more generally, as n increases, the number of CTD vectors needed to provide complete n-wise coverage increases logarithmically with n.

FIG. 2 depicts an example generic CTD vector 200 of the type that may be included in the set of CTD vectors 106. The example CTD vector 200 includes a plurality of attributes 202. As previously described, the attributes 202 may be used to model inputs to a SUT. The attributes 202 may be associated with attribute values 204. In particular, each attribute 202 may have a corresponding attribute value 204, which may be one of one or more candidate attribute values that the attribute is allowed to take on.

Referring again to FIG. 4, at block 406 of the method 400, in example embodiments, computer-executable instructions of one or more test case generation modules 108 may be executed to generate, from the initial set of CTD test vectors 106, a corresponding set of test cases 110, which are then executed by the test case execution module(s) 112 to yield an execution result (pass or fail) for each test case. For instance, the set of CTD test vectors 106 may be provided as input to a test case generation tool configured to generate a respective corresponding test case for each CTD vector. Each test case in the set of test cases 110 may be designed to test the interactions among the particular combination of attribute values contained in a corresponding CTD vector of the set of CTD vectors 106. It should be appreciated that a set of CTD vectors and their corresponding test cases may, at times herein, be described and/or depicted interchangeably. For instance, the example set of CTD vectors 300 depicted in FIG. 3 may be interchangeably thought of as the corresponding set of test cases that test the particular combinations of attribute values represented by the set of CTD vectors 300.

At block 408 of the method 400, in example embodiments, computer-executable instructions of the test case execution module(s) 112 are executed to determine whether any test cases in the set of test cases 110 failed. In example embodiments, execution of each test case 110 results in either a successful execution result, indicating that the combination of attribute values contained in the corresponding CTD vector 106 does not contain an n-wise (or m-wise where m<n) error, or a failure execution result, indicating that the combination of attribute values in the corresponding CTD vector 106 does contain an n-wise (or m-wise where m<n) error.

Referring to the example depicted in FIG. 3, test cases corresponding to the example set of CTD vectors 300 are executed at block 406 in example embodiments to yield a respective execution result for each test case. In particular, two test cases 302 and 304 are illustratively depicted in FIG. 3 as resulting in failure. Failing test case 302 tests the following combination of attribute values: Dale; blue; triangle, which respectively correspond to the attributes name, color, and shape. Failing test case 304 tests the following combination of attribute values: Dale; blue; circle, which respectively correspond to the attributes name, color, and shape. Although “Dale” and “blue” are present both in the CTD vector corresponding to failing test case 302 and in the CTD vector corresponding to failing test case 304, it is unclear at this stage in the process as to whether “Dale” and “blue” are generating a pairwise error; whether “Dale” and (“triangle” or “circle”) are generating the pairwise errors; or whether “blue” and “triangle” or “circle”) are generating the pairwise errors. Subsequent operations of method 400, as will be described hereinafter, utilize inverse combinatorics to expand the test space around a selected failing test case to detect and localize the particular combination of attribute values that are causing the n-wise error (pairwise error in the case of the example depicted in FIG. 3).

Referring again to FIG. 4, responsive to a negative determination at block 408, the method 400 may end because none of the initial set of test cases 110 has failed. Because the initial set of CTD vectors 106 (based on which the set of test cases 110 were generated) provided complete n-wise coverage, it can be ensured that an n-wise or lesser order error is not present. However, successful execution of all of the test cases in the initial set of test cases 110 does not ensure that a higher order error (k-wise where k>n) is not present.

On the other hand, in response to a positive determination at block 408 indicating that execution of the set of test cases 110 results in one or more failing test cases 114, the method proceeds to block 410 where, in example embodiments, computer-executable instructions of one or more inverse CTD test case generation modules 116 are executed to select a particular failing test case 114 and apply inverse combinatorics to the selected failing test case 114 to produce a new set of test cases 118 capable of being used to detect and localize the combination of attribute values that are causing the n-wise or lesser order error.

In example embodiments, application of inverse combinatorics to the selected failing test case 114 includes generating a respective new test case 118 with respect to each attribute. Thus, the number of new test cases generated may be equal to the number of attributes. In example embodiments, in each new test case 118, the attribute value in the selected failing test case 114 of a corresponding attribute is changed to an attribute value for that attribute that is not present in any other failing test case and the respective attribute value for each other attribute is unchanged from that which is present in the selected failing test case 114.

Referring again to the example depicted in FIG. 3, assuming that failing test case 302 is selected at block 410, then the example set of new test cases 306 may be generated. In example embodiments, each example new test case 306 may be generated by changing the attribute value of a corresponding attribute in the selected failing test case 302 to a different value that is not present in any other failing test case. For instance, a first new test case corresponding to the CTD vector <Andrew, blue, triangle> is obtained by changing the attribute value of the “name” attribute in the failing test case 302 from “Dale” to “Andrew” while keeping the attribute values for the other attributes the same as in the failing test case 302. Similarly, a second new test case corresponding to the CTD vector <Dale, green, triangle> is obtained by changing the attribute value of the “color” attribute in the failing test case 302 from “Blue” to “Green” while keeping the attribute values for the other attributes the same as in the failing test case 302. Lastly, a third new test case corresponding to the CTD vector <Dale, blue, square> is obtained by changing the attribute value of the “shape” attribute in the failing test case 302 from “triangle” to “square” while keeping the attribute values for the other attributes the same as in the failing test case 302.

It should be appreciated that the respective attribute value that is changed to obtain each new test case 306 is obviously not present in the selected failing test case 302. Moreover, each changed attribute value is not present in any other failing test case as well (e.g., failing test case 304). Specifically, the changed attribute value “Andrew” for the first new test case is not present in any failing test case; the changed attribute value “green” for the second new test case is not present in any failing test case; and the changed attribute value “square” for the third new test case is not present in any failing test case.

After generating the set of new test cases 118 by performing inverse combinatorics on a selected failing test case 114, computer-executable instructions of the test case execution module(s) 112 are executed, in example embodiments, at block 412 of the method 400. Then, at block 414 of the method 400, in example embodiments, computer-executable instructions of one or more n-wise error localization modules 122 are executed to detect and localize an n-wise or lesser order error based on the attributes and their corresponding original failing attribute values in the selected failing test case 114 that when changed resulted in new test cases that pass. In particular, computer-executable instructions of the n-wise error localization module(s) 122 are executed to assess execution results 120 for the set of new test cases 118 to detect and localize an n-wise or lesser order error based on those new test cases that yield a successful execution result. As used herein, a lesser order error refers to an m-wise error where m<n, assuming complete n-wise coverage by the set of CTD vectors 106.

Referring again to the example depicted in FIG. 3 which assumes detection and localization of a pairwise error, execution of the set of new test cases 306 results in the first new test case corresponding to the CTD vector <Andrew, blue, triangle> passing; the second new test case corresponding to the CTD vector <Dale, green, triangle> passing; and the third new test case corresponding the CTD vector <Dale, blue, square> failing. In example embodiments, the n-wise error localization module(s) 122 determine, based on the failing execution result for the third new test case, that the “shape” attribute is not contributing to a pairwise error because changing the attribute value from “triangle” in the failing test 302 to “square” in the third new test case continues to result in failure.

On the other hand, the n-wise error localization module(s) 122 may determine that the attributes whose attribute values were changed to obtain the new test cases that passed execution do contribute to the pairwise error. Specifically, in example embodiments, based on the successful execution result for the first new test case corresponding to the CTD vector <Andrew, blue, triangle>, the n-wise error localization module(s) 122 determine that the “name” attribute and the original failing attribute value “Dale” are contributing to the pairwise error. Similarly, in example embodiments, based on the successful execution result for the second new test case corresponding to the CTD vector <Dale, green, triangle>, the n-wise error localization module(s) 122 determine that the “color” attribute and the original failing attribute value “blue” are also contributing to the pairwise error. Thus, based on the execution results 120 for the set of new test cases 118, the n-wise error localization module(s) 122 are capable of determining, in the example depicted in FIG. 3, that the attributes “name” and “color” having the attribute values “Dale” and “blue,” respectively, are responsible for the pairwise error. Stated more generally, the n-wise error localization module(s) 122 are capable of determining the specific attribute-value pairs that cause an n-wise or lesser order error based on an assessment of the execution results 120 for the set of new cases 118, and more specifically, the original attribute values that were changed in the selected failing test case to obtain passing new test cases.

The example depicted in FIG. 3 assumes an initial set of CTD vectors 300 that provides complete pairwise coverage, in which case, a pairwise or lesser order error (e.g., a single attribute value that causes an error) can be detected and localized in a single pass of applying inverse combinatorics on a selected failing test case to obtain the set of new test cases 118. In general, if the initial set of CTD vectors 106 provides n-wise coverage, then a single pass of applying inverse combinatorics on a selected failing test case reveals an n-wise or lesser order error. While a k-wise error where k>n may be detectable using an initial set of CTD vectors that provides complete n-wise coverage, this is not a guarantee because the initial set of CTD vectors 106 would not include all k-wise interactions. However, an initial set of CTD vectors 106 that provides complete n-wise coverage (e.g., complete pairwise coverage) may provide some degree of k-wise coverage where k>n (e.g., three-wise coverage), and thus, based on the particular CTD vectors that are chosen, the method 400 may be capable of revealing a k-wise error at a single pass or after multiple passes of applying inverse combinatorics to selected failing test cases.

Referring again to FIG. 4, at block 416 of the method 400, in example embodiments, computer-executable instructions of one or more regression bucket generation module(s) 126 are executed to generate and output a regression bucket 128 of failing test cases that includes all possible combinations in the Cartesian product space that include the original failing attribute-value pairs. In particular, the regression bucket generation module(s) 126, in example embodiments, receive an indication of the error-producing subset of attribute-value pairs 124 as input and determine and output the regression bucket 128 that includes only those test cases that correspond to all possible combinations in the Cartesian product space that include the particular attribute values that are causing the detected error.

Referring again to the example of FIG. 3, the regression bucket generation module(s) 126 receive as input the attributes “name” and “color” and the corresponding attribute values “Dale” and “blue” that are causing the pairwise error, determines all attribute-value combinations in the Cartesian product space that include “Dale” and “blue,” and populates the regression bucket 128 with test cases corresponding to all of these combinations. In this example, the regression bucket 128 would include the following test cases: (Dale, blue, triangle); (Dale, blue, circle); and (Dale, blue, square). Because each of the test cases in the regression bucket 128 includes the attribute values “Dale” and “blue” for the attributes “name” and “color,” respectively, which together are contributing to the detected pairwise error, each test case in the regression bucket 128 is ensured to fail. In example embodiments, the regression bucket 128 can be outputted for use by a manual tester or another automated debugging algorithm. The regression bucket 128 of failing test cases can be used to verify whether the detected error has been corrected because all test cases contained in the regression bucket 128 will pass only when the bug is fixed. Thus, if any test case in the regression bucket 128 continues to fail despite modifications made to the SUT in an attempt to correct the error, then this indicates that the error has not been completely resolved.

FIG. 5 is a process flow diagram of an illustrative method 500 for detecting and localizing an n-wise fault using CTD techniques and generating a regression bucket of failing test cases that expose the detected n-wise fault while adhering to architectural restrictions in accordance with one or more example embodiments of the invention. FIG. 5 will be described in conjunction with FIG. 1 hereinafter.

At block 502 of the method 500, inputs to a SUT may be modeled as a collection of attribute-value pairs 102 similar to block 402 of the method 400. Then, at block 504 of the method 500, in example embodiments, computer-executable instructions of the n-wise coverage CTD vector generation module(s) 104 are executed to reduce the entire Cartesian product space associated with the collection of attribute-value pairs 102 down by identifying and excluding those combinations that do not adhere to architectural restrictions associated with the SUT. After the entire Cartesian product space is reduced to exclude combinations that do not satisfy architectural restrictions on the SUT, computer-executable instructions of the n-wise coverage CTD vector generation module(s) 104 are executed, in example embodiments, at block 506 of the method 500, to generate the further reduced initial set of CTD vectors 106. In example embodiments, each CTD vector 106 is selected only from the reduced test space that excludes invalid combinations of attribute values that violate architectural restrictions on the SUT.

Architectural restrictions may include any of a variety of restrictions on inputs to the SUT. For instance, an example restriction may be that if a given attribute has a particular attribute value, then one or more other attributes are excluded from having certain attribute value(s). Another example architectural restriction may be that if a given attribute has a particular attribute value, then one or more other attributes must have certain attribute value(s). Yet another example architectural restriction may be that a new attribute is introduced if and only if a particular attribute has a particular attribute value. It should be appreciated that the above examples of architectural restrictions are merely illustrative and not exhaustive.

In example embodiments, architectural restrictions are taken into account in method 500 prior to performing the reduction of the entire Cartesian space down to the initial set of CTD vectors 106 that provides desired complete n-wise coverage. That is, in example embodiments, particular combinations of attribute values that violate any architectural restrictions are first excluded from the Cartesian product space, and then the reduction down to the set of CTD vectors 106 that provides complete desired n-wise coverage is performed. In this manner, it can be ensured that no combination of attribute values that violates an architectural restriction is included in the initial set of CTD vectors 106.

At block 508 of the method 500, the initial set of test cases 110 is generated from the initial set of CTD vectors 106 and executed similar to block 406 of the method 400. At block 510, a determination is made as to whether any of test cases 110 failed similar to the determination at block 408 of the method 400. In response to a negative determination at block 510, the method 500 ends because none of test cases 110 produce a failing execution result. On the other hand, in response to a positive determination at block 510, the method 500 proceeds to block 512, where computer-executable instructions of the inverse CTD test case generation module(s) 116 are executed to generate new test cases 118 from a selected failing test case.

In example embodiments, a respective set of new test cases is generated for each attribute by changing the attribute value for that attribute in the selected failing test case to each other candidate attribute value for that attribute that is not present in any of the failing test cases. Thus, the example method 500 differs from the example method 400 with respect to the manner in which the new test cases 118 are generated. In particular, according to the example method 400, a single new test case is generated with respect to each attribute in a selected failing test case by changing the attribute value for the attribute to another attribute value that the attribute is eligible to have and that is not present in any failing test case. While there may be multiple attribute values for an attribute that are not present in any failing test case, each new test case generated according to the example method 400 only needs to test one such attribute value, and thus, each new test case can be generated simply by oscillating a corresponding attribute value in the selected failing test case to one other attribute value that is not present in any failing test case. In contrast, according to the example method 500, for each attribute in a selected failing test case, a new test case is generated for each possible attribute value for that attribute that is not present in any failing test case. Thus, according to the example method 500, if there are multiple attribute values for an attribute that are not present in any failing test case, a new test case is generated for each such attribute value.

For instance, if we assume that 1) there are three attributes A, B, and C that can take on the candidate attribute values A₁-A₄, B₁-B₃, and C₁-C₃, respectively, 2) the selected failing test case tests the following combination of attribute values: (A₁, B₁, C₁), and 3) there is one other failing test case that tests the following combination of attribute values (A₂, B₁, C₃), then according to the example method 400, the following set of new test cases may be generated: {(A₃, B₁, C₁); (A₁, B₂, C₁); (A₁, B₁, C₂)}. Because, the example method 400 generates only a single new test case with respect to each attribute in the selected failing test case, alternate sets of new test cases can also be generated in example embodiments. For instance, the example method 400 may generate either of the following sets of new test cases in lieu of the one described above: {(A₄, B₁, C₁); (A₁, B₂, C₁); (A₁, B₁, C₂)} or {(A₄, B₁, C₁); (A₁, B₃, C₁); (A₁, B₁, C₂)}. In contrast, according to the example method 500, all of the unique new test cases described above would be generated because a new test case is generated with respect to each attribute for each attribute value for that attribute that is not present in any failing test case. That is, the set of new test cases generated according to the example method 500 would include {(A₃, B₁, C₁); (A₁, B₂, C₁); (A₁, B₁, C₂); (A₄, B₁, C₁); (A₁, B₃, C₁)}. Thus, the inverse combinatorics expansion performed according to the example method 500 may generally result in a larger set of new test cases then the example method 400.

In the example depicted in FIG. 3, for instance, inverse combinatorics are applied to the failing test case 302 to obtain the set of new test cases 306 according to the example method 400. That is, a single new test case is shown as being generated with respect to each attribute in the selected failing test case 302 by changing the corresponding attribute value for that attribute in the selected failing test case 302 to another candidate attribute value that is not present in any failing test case. If, on the other hand, the set of new test cases 306 was generated according to the example method 500 instead, the set 306 would include the following additional test cases: (Ryan, blue, triangle) and (Rachel, blue, triangle) because the attribute values “Ryan” and “Rachel” are also not present in any failing test case.

After the inverse combinatorics expansion is performed at block 512, the method 500 may proceed to block 514, where computer-executable instructions of the inverse CTD test case generation module(s) 116 may be executed to exclude any test case generated at block 512 that violates an architectural restriction on the SUT. Thus, in example embodiments, the set of new test cases 118 obtained via the inverse combinatorics expansion at block 512 is reduced to a smaller set by excluding (and not executing) one or more new test cases that violate one or more architectural restrictions. In particular, when a selected test case corresponding to an initial CTD vector 106 fails and is selected for expansion to obtain the set of new test cases 118 designed to detect and localize an n-wise error, the expansion may be performed first without taking into account any architectural restrictions. Then, any new test cases generated from the expansion that violate an architectural restriction can be excluded from the set of new test cases 118. In this manner, it can be ensured that the expansion provides as much coverage of the test space in the neighborhood around the failing test case as possible.

At block 516 of the method 500, the set of new test cases 118 (potentially reduced at block 514 to exclude any test case generated via the inverse combinatorics expansion at block 512 that violates an architectural restriction) may be executed similar to block 412 of the method 400. At block 518 of the method 500, in example embodiments, an n-wise error is detected and localized based at least in part on the attributes and their corresponding attribute values in the selected failing test case that when changed produce a new test case that passes, similar to block 414 of the method 400.

Then, at block 520 of the method 500, the regression bucket 128 of failing test cases is generated similar to block 416 of the method 400. Each test case in the regression bucket 128 corresponds to a particular combination of attribute values that includes the failure-producing subset of attribute values 124 such that the regression bucket 128 covers all possible combinations of attribute-value pairs that adhere to architectural restrictions on the SUT and that include the failure-producing attribute values. Finally, at block 522 of the method 500, any failing test case that violates an architectural restriction can be excluded from the regression bucket 128. Thus, according to the example method 500, the regression bucket 128 of failing test cases may first be generated without regards to architectural restrictions, and then any test case that violates an architectural restriction can be excluded from the regression bucket 128. That is, test cases corresponding to all possible combinations in the entire Cartesian product test space that include the particular combination of attribute values causing an n-wise or lesser order error may first be generated and included in the regression bucket 128, and then the regression bucket 128 may be reduced to exclude any test case(s) that violate a restriction. In alternative example embodiments, the test cases included in the regression bucket 128 may be selected from the reduced Cartesian space from which the initial set of CTD vectors are selected, in which case, the regression bucket 128 would be generated to include only those combinations of attribute values that include the subset of attribute values causing the error and that do not violate any architectural restriction.

One or more illustrative embodiments of the invention are described herein. Such embodiments are merely illustrative of the scope of this invention and are not intended to be limiting in any way. Accordingly, variations, modifications, and equivalents of embodiments disclosed herein are also within the scope of this invention.

FIG. 6 is a schematic diagram of an illustrative computing device 600 configured to implement one or more example embodiments of the invention. The illustrative computing device 600 may include a server or collection of servers; a personal computer; a handheld device; or the like. While the computing device 600 and/or any particular component of the computing device 600 may be described herein in the singular, it should be appreciated that multiple instances of the computing device 600 and/or any component thereof may be provided and functionality described in connection with the computing device 600 may be distributed across multiple computing devices 600 and/or across multiple instances of any particular component of the computing device 600.

In an illustrative configuration, the computing device 600 may include one or more processors (processor(s)) 602, one or more memory devices 604 (generically referred to herein as memory 604), one or more input/output (“I/O”) interfaces 606, one or more network interfaces 608, and data storage 612. The computing device 600 may further include one or more buses 610 that functionally couple various components of the computing device 600.

The bus(es) 610 may include at least one of a system bus, a memory bus, an address bus, or a message bus, and may permit the exchange of information (e.g., data (including computer-executable code), signaling, etc.) between various components of the computing device 600. The bus(es) 610 may include, without limitation, a memory bus or a memory controller, a peripheral bus, an accelerated graphics port, and so forth. The bus(es) 610 may be associated with any suitable bus architecture including, without limitation, an Industry Standard Architecture (ISA), a Micro Channel Architecture (MCA), an Enhanced ISA (EISA), a Video Electronics Standards Association (VESA) architecture, an Accelerated Graphics Port (AGP) architecture, a Peripheral Component Interconnects (PCI) architecture, a PCI-Express architecture, a Personal Computer Memory Card International Association (PCMCIA) architecture, a Universal Serial Bus (USB) architecture, and so forth.

The memory 604 may include volatile memory (memory that maintains its state when supplied with power) such as random access memory (RAM) and/or non-volatile memory (memory that maintains its state even when not supplied with power) such as read-only memory (ROM), flash memory, ferroelectric RAM (FRAM), and so forth. Persistent data storage, as that term is used herein, may include non-volatile memory. In certain example embodiments, volatile memory may enable faster read/write access than non-volatile memory. However, in certain other example embodiments, certain types of non-volatile memory (e.g., FRAM) may enable faster read/write access than certain types of volatile memory.

In various implementations, the memory 604 may include multiple different types of memory such as various types of static random access memory (SRAM), various types of dynamic random access memory (DRAM), various types of unalterable ROM, and/or writeable variants of ROM such as electrically erasable programmable read-only memory (EEPROM), flash memory, and so forth. The memory 604 may include main memory as well as various forms of cache memory such as instruction cache(s), data cache(s), translation lookaside buffer(s) (TLBs), and so forth. Further, cache memory such as a data cache may be a multi-level cache organized as a hierarchy of one or more cache levels (L1, L2, etc.).

The data storage 612 may include removable storage and/or non-removable storage including, but not limited to, magnetic storage, optical disk storage, and/or tape storage. The data storage 612 may provide non-volatile storage of computer-executable instructions and other data. The memory 604 and the data storage 612, removable and/or non-removable, are examples of computer-readable storage media (CRSM) as that term is used herein.

The data storage 612 may store computer-executable code, instructions, or the like that may be loadable into the memory 604 and executable by the processor(s) 602 to cause the processor(s) 602 to perform or initiate various operations. The data storage 612 may additionally store data that may be copied to memory 604 for use by the processor(s) 602 during the execution of the computer-executable instructions. Moreover, output data generated as a result of execution of the computer-executable instructions by the processor(s) 602 may be stored initially in memory 604 and may ultimately be copied to data storage 612 for non-volatile storage.

More specifically, the data storage 612 may store one or more operating systems (O/S) 614; one or more database management systems (DBMS) 616 configured to access the memory 604 and/or one or more external datastores 630; and one or more program modules, applications, engines, managers, computer-executable code, scripts, or the like such as, for example, one or more n-wise coverage CTD vector generation modules 618; one or more test case generation modules 620; one or more test case execution modules 622; one or more inverse CTD test case generation modules 624; one or more n-wise error localization modules 626; and one or more regression bucket generation modules 628. Any of the components depicted as being stored in data storage 612 may include any combination of software, firmware, and/or hardware. The software and/or firmware may include computer-executable instructions (e.g., computer-executable program code) that may be loaded into the memory 604 for execution by one or more of the processor(s) 602 to perform any of the operations described earlier in connection with correspondingly named modules/engines.

Although not depicted in FIG. 6, the data storage 612 may further store various types of data utilized by components of the computing device 600 (e.g., data stored in the datastore(s) 630). Any data stored in the data storage 612 may be loaded into the memory 604 for use by the processor(s) 602 in executing computer-executable instructions. In addition, any data stored in the data storage 612 may potentially be stored in the external datastore(s) 630 and may be accessed via the DBMS 616 and loaded in the memory 604 for use by the processor(s) 602 in executing computer-executable instructions.

The processor(s) 602 may be configured to access the memory 604 and execute computer-executable instructions loaded therein. For example, the processor(s) 602 may be configured to execute computer-executable instructions of the various program modules, applications, engines, managers, or the like of the computing device 600 to cause or facilitate various operations to be performed in accordance with one or more embodiments of the invention. The processor(s) 602 may include any suitable processing unit capable of accepting data as input, processing the input data in accordance with stored computer-executable instructions, and generating output data. The processor(s) 602 may include any type of suitable processing unit including, but not limited to, a central processing unit, a microprocessor, a Reduced Instruction Set Computer (RISC) microprocessor, a Complex Instruction Set Computer (CISC) microprocessor, a microcontroller, an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA), a System-on-a-Chip (SoC), a digital signal processor (DSP), and so forth. Further, the processor(s) 602 may have any suitable microarchitecture design that includes any number of constituent components such as, for example, registers, multiplexers, arithmetic logic units, cache controllers for controlling read/write operations to cache memory, branch predictors, or the like. The microarchitecture design of the processor(s) 602 may be capable of supporting any of a variety of instruction sets.

Referring now to other illustrative components depicted as being stored in the data storage 612, the O/S 614 may be loaded from the data storage 612 into the memory 604 and may provide an interface between other application software executing on the computing device 600 and hardware resources of the computing device 600. More specifically, the O/S 614 may include a set of computer-executable instructions for managing hardware resources of the computing device 600 and for providing common services to other application programs. In certain example embodiments, the O/S 614 may include or otherwise control the execution of one or more of the program modules, engines, managers, or the like depicted as being stored in the data storage 612. The O/S 614 may include any operating system now known or which may be developed in the future including, but not limited to, any server operating system, any mainframe operating system, or any other proprietary or non-proprietary operating system.

The DBMS 616 may be loaded into the memory 604 and may support functionality for accessing, retrieving, storing, and/or manipulating data stored in the memory 604, data stored in the data storage 612, and/or data stored in external datastore(s) 630. The DBMS 616 may use any of a variety of database models (e.g., relational model, object model, etc.) and may support any of a variety of query languages. The DBMS 616 may access data represented in one or more data schemas and stored in any suitable data repository. Data stored in the datastore(s) 630 may include, for example, architectural restrictions data 130; CTD vectors; CTD test case results; and so forth, any portion of which may alternatively or additionally be stored in the data storage 612. External datastore(s) 630 that may be accessible by the computing device 600 via the DBMS 616 may include, but are not limited to, databases (e.g., relational, object-oriented, etc.), file systems, flat files, distributed datastores in which data is stored on more than one node of a computer network, peer-to-peer network datastores, or the like.

Referring now to other illustrative components of the computing device 600, the input/output (I/O) interface(s) 606 may facilitate the receipt of input information by the computing device 600 from one or more I/O devices as well as the output of information from the computing device 600 to the one or more I/O devices. The I/O devices may include any of a variety of components such as a display or display screen having a touch surface or touchscreen; an audio output device for producing sound, such as a speaker; an audio capture device, such as a microphone; an image and/or video capture device, such as a camera; a haptic unit; and so forth. Any of these components may be integrated into the computing device 600 or may be separate. The I/O devices may further include, for example, any number of peripheral devices such as data storage devices, printing devices, and so forth.

The I/O interface(s) 606 may also include an interface for an external peripheral device connection such as universal serial bus (USB), FireWire, Thunderbolt, Ethernet port or other connection protocol that may connect to one or more networks. The I/O interface(s) 606 may also include a connection to one or more antennas to connect to one or more networks via a wireless local area network (WLAN) (such as Wi-Fi) radio, Bluetooth, and/or a wireless network radio, such as a radio capable of communication with a wireless communication network such as a Long Term Evolution (LTE) network, WiMAX network, 3G network, etc.

The computing device 600 may further include one or more network interfaces 608 via which the computing device 600 may communicate with any of a variety of other systems, platforms, networks, devices, and so forth. The network interface(s) 608 may enable communication, for example, with one or more other devices via one or more of networks. Such network(s) may include, but are not limited to, any one or more different types of communications networks such as, for example, cable networks, public networks (e.g., the Internet), private networks (e.g., frame-relay networks), wireless networks, cellular networks, telephone networks (e.g., a public switched telephone network), or any other suitable private or public packet-switched or circuit-switched networks. Such network(s) may have any suitable communication range associated therewith and may include, for example, global networks (e.g., the Internet), metropolitan area networks (MANs), wide area networks (WANs), local area networks (LANs), or personal area networks (PANs). In addition, such network(s) may include communication links and associated networking devices (e.g., link-layer switches, routers, etc.) for transmitting network traffic over any suitable type of medium including, but not limited to, coaxial cable, twisted-pair wire (e.g., twisted-pair copper wire), optical fiber, a hybrid fiber-coaxial (HFC) medium, a microwave medium, a radio frequency communication medium, a satellite communication medium, or any combination thereof.

It should be appreciated that the program modules/engines depicted in FIG. 6 as being stored in the data storage 612 are merely illustrative and not exhaustive and that processing described as being supported by any particular module may alternatively be distributed across multiple modules, engines, or the like, or performed by a different module, engine, or the like. In addition, various program module(s), script(s), plug-in(s), Application Programming Interface(s) (API(s)), or any other suitable computer-executable code hosted locally on the computing device 600 and/or other computing devices may be provided to support functionality provided by the modules depicted in FIG. 6 and/or additional or alternate functionality. Further, functionality may be modularized in any suitable manner such that processing described as being performed by a particular module may be performed by a collection of any number of program modules, or functionality described as being supported by any particular module may be supported, at least in part, by another module. In addition, program modules that support the functionality described herein may be executable across any number of cluster members in accordance with any suitable computing model such as, for example, a client-server model, a peer-to-peer model, and so forth. In addition, any of the functionality described as being supported by any of the modules depicted in FIG. 4 may be implemented, at least partially, in hardware and/or firmware across any number of devices.

It should further be appreciated that the computing device 600 may include alternate and/or additional hardware, software, or firmware components beyond those described or depicted without departing from the scope of the invention. More particularly, it should be appreciated that software, firmware, or hardware components depicted as forming part of the computing device 600 are merely illustrative and that some components may not be present or additional components may be provided in various embodiments. While various illustrative modules have been depicted and described as software modules stored in data storage 612, it should be appreciated that functionality described as being supported by the modules may be enabled by any combination of hardware, software, and/or firmware. It should further be appreciated that each of the above-mentioned modules may, in various embodiments, represent a logical partitioning of supported functionality. This logical partitioning is depicted for ease of explanation of the functionality and may not be representative of the structure of software, hardware, and/or firmware for implementing the functionality. Accordingly, it should be appreciated that functionality described as being provided by a particular module may, in various embodiments, be provided at least in part by one or more other modules. Further, one or more depicted modules may not be present in certain embodiments, while in other embodiments, additional program modules and/or engines not depicted may be present and may support at least a portion of the described functionality and/or additional functionality.

One or more operations of the method 400 and/or the method 500 may be performed by one or more computing devices 600 having the illustrative configuration depicted in FIG. 6, or more specifically, by one or more program modules, engines, applications, or the like executable on such a device. It should be appreciated, however, that such operations may be implemented in connection with numerous other device configurations.

The operations described and depicted in the illustrative methods of FIGS. 4 and 5 may be carried out or performed in any suitable order as desired in various example embodiments of the invention. Additionally, in certain example embodiments, at least a portion of the operations may be carried out in parallel. Furthermore, in certain example embodiments, less, more, or different operations than those depicted in FIGS. 4 and 5 may be performed.

Although specific embodiments of the invention have been described, one of ordinary skill in the art will recognize that numerous other modifications and alternative embodiments are within the scope of the invention. For example, any of the functionality and/or processing capabilities described with respect to a particular system, system component, device, or device component may be performed by any other system, device, or component. Further, while various illustrative implementations and architectures have been described in accordance with embodiments of the invention, one of ordinary skill in the art will appreciate that numerous other modifications to the illustrative implementations and architectures described herein are also within the scope of this invention. In addition, it should be appreciated that any operation, element, component, data, or the like described herein as being based on another operation, element, component, data, or the like may be additionally based on one or more other operations, elements, components, data, or the like. Accordingly, the phrase “based on,” or variants thereof, should be interpreted as “based at least in part on.”

The present invention may be a system, a method, and/or a computer program product. The computer program product may include a computer readable storage medium (or media) having computer readable program instructions thereon for causing a processor to carry out aspects of the present invention.

The computer readable storage medium can be a tangible device that can retain and store instructions for use by an instruction execution device. The computer readable storage medium may be, for example, but is not limited to, an electronic storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the foregoing. A non-exhaustive list of more specific examples of the computer readable storage medium includes the following: a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), a static random access memory (SRAM), a portable compact disc read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanically encoded device such as punch-cards or raised structures in a groove having instructions recorded thereon, and any suitable combination of the foregoing. A computer readable storage medium, as used herein, is not to be construed as being transitory signals per se, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide or other transmission media (e.g., light pulses passing through a fiber-optic cable), or electrical signals transmitted through a wire.

Computer readable program instructions described herein can be downloaded to respective computing/processing devices from a computer readable storage medium or to an external computer or external storage device via a network, for example, the Internet, a local area network, a wide area network and/or a wireless network. The network may comprise copper transmission cables, optical transmission fibers, wireless transmission, routers, firewalls, switches, gateway computers and/or edge servers. A network adapter card or network interface in each computing/processing device receives computer readable program instructions from the network and forwards the computer readable program instructions for storage in a computer readable storage medium within the respective computing/processing device.

Computer readable program instructions for carrying out operations of the present invention may be assembler instructions, instruction-set-architecture (ISA) instructions, machine instructions, machine dependent instructions, microcode, firmware instructions, state-setting data, or either source code or object code written in any combination of one or more programming languages, including an object oriented programming language such as Smalltalk, C++ or the like, and conventional procedural programming languages, such as the “C” programming language or similar programming languages. The computer readable program instructions may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet Service Provider). In some embodiments, electronic circuitry including, for example, programmable logic circuitry, field-programmable gate arrays (FPGA), or programmable logic arrays (PLA) may execute the computer readable program instructions by utilizing state information of the computer readable program instructions to personalize the electronic circuitry, in order to perform aspects of the present invention.

Aspects of the present invention are described herein with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer readable program instructions.

These computer readable program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks. These computer readable program instructions may also be stored in a computer readable storage medium that can direct a computer, a programmable data processing apparatus, and/or other devices to function in a particular manner, such that the computer readable storage medium having instructions stored therein comprises an article of manufacture including instructions which implement aspects of the function/act specified in the flowchart and/or block diagram block or blocks.

The computer readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device to cause a series of operational steps to be performed on the computer, other programmable apparatus or other device to produce a computer implemented process, such that the instructions which execute on the computer, other programmable apparatus, or other device implement the functions/acts specified in the flowchart and/or block diagram block or blocks.

The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of instructions, which comprises one or more executable instructions for implementing the specified logical function(s). In some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems that perform the specified functions or acts or carry out combinations of special purpose hardware and computer instructions. 

What is claimed is:
 1. A method for detecting and localizing a fault in a System Under Test (SUT) while adhering to one or more architectural restrictions on the SUT, the method comprising: modeling inputs to the SUT as a collection of attribute-value pairs; reducing a Cartesian product space comprising all possible combinations of the attribute-value pairs to a reduced test space at least in part by excluding one or more combinations of attribute-value pairs that violate at least one of the one or more architectural restrictions; generating an initial set of test vectors that provides complete n-wise coverage of the reduced test space; generating an initial set of test cases from the initial set of test vectors; executing the initial set of test cases to obtain a first set of execution results; determining, based at least in part on the first set of execution results, that one or more test cases failed execution; generating a set of new test cases from a selected failing test case, wherein generating the set of new test cases comprises generating, in relation to each attribute in the selected failing test case, a respective subset of new test cases at least in part by changing a respective attribute value for the attribute in the selected failing test case to each other candidate attribute value for the attribute that is not present in any of the one or more test cases that failed execution; executing the set of new test cases to obtain a second set of execution results; and detecting and localizing the fault based at least in part on the second set of execution results.
 2. The method of claim 1, wherein the one or more architectural restrictions comprise at least one of: a requirement that a first attribute cannot take on one or more candidate attribute values if a second attribute has a particular attribute value, a requirement that the first attribute must take on a particular candidate attribute value if the second attribute has the particular attribute value, or a requirement to introduce a third attribute if the second attribute has the particular attribute value.
 3. The method of claim 1, further comprising excluding, from the set of new test cases, one or more new test cases that violate at least one of the one or more architectural restrictions.
 4. The method of claim 1, wherein detecting and localizing the fault based at least in part on the second set of execution results comprises: determining that a first new test case failed execution; determining that a first attribute having a first original attribute value in the selected failing test case that was changed to obtain the first new test case does not contribute to the fault; determining that a second new test case and a third new test case each successfully executed; determining a second attribute having a second original attribute value in the selected failing test case that was changed to generate the second new test case; determining a third attribute having a third original attribute value in the selected failing test case that was changed to generate the third new test case; and determining that the second original attribute value and the third original attribute value contribute to the fault.
 5. The method of claim 1, wherein detecting and localizing the fault based at least in part on the second set of execution results comprises determining a particular combination of attribute values that causes the fault.
 6. The method of claim 5, further comprising: generating a regression bucket of failing test cases based at least in part on the particular combination of attribute values that causes the fault, wherein generating the regression bucket comprises: determining all combinations in the Cartesian product space that include the particular combination of attribute values that causes the fault; and generating, for inclusion in the regression bucket, a respective failing test case for each combination in the Cartesian product space that includes the particular combination of attribute values that causes the fault; and excluding, from the regression bucket, one or more failing test cases that violate at least one of the one or more architectural restrictions.
 7. The method of claim 5, further comprising generating a regression bucket of failing test cases based at least in part on the particular combination of attribute values that causes the fault, wherein generating the regression bucket comprises: determining all combinations in the reduced test space that include the particular combination of attribute values that causes the fault; and generating, for inclusion in the regression bucket, a respective failing test case for each combination in the reduced test space that includes the particular combination of attribute values that causes the fault.
 8. A system for detecting and localizing a fault in a System Under Test (SUT) while adhering to one or more architectural restrictions on the SUT, the system comprising: at least one processor; and at least one memory storing computer-executable instructions, wherein the at least one processor is configured to access the at least one memory and execute the computer-executable instructions to: model inputs to the SUT as a collection of attribute-value pairs; reduce a Cartesian product space comprising all possible combinations of the attribute-value pairs to a reduced test space at least in part by excluding one or more combinations of attribute-value pairs that violate at least one of the one or more architectural restrictions; generate an initial set of test vectors that provides complete n-wise coverage of the reduced test space; generate an initial set of test cases from the initial set of test vectors; execute the initial set of test cases to obtain a first set of execution results; determine, based at least in part on the first set of execution results, that one or more test cases failed execution; generate a set of new test cases from a selected failing test case, wherein generating the set of new test cases comprises generating, in relation to each attribute in the selected failing test case, a respective subset of new test cases at least in part by changing a respective attribute value for the attribute in the selected failing test case to each other candidate attribute value for the attribute that is not present in any of the one or more test cases that failed execution; execute the set of new test cases to obtain a second set of execution results; and detect and localize the fault based at least in part on the second set of execution results.
 9. The system of claim 8, wherein the one or more architectural restrictions comprise at least one of: a requirement that a first attribute cannot take on one or more candidate attribute values if a second attribute has a particular attribute value, a requirement that the first attribute must take on a particular candidate attribute value if the second attribute has the particular attribute value, or a requirement to introduce a third attribute if the second attribute has the particular attribute value.
 10. The system of claim 8, wherein the at least one processor is further configured to execute the computer-executable instructions to: exclude, from the set of new test cases, one or more new test cases that violate at least one of the one or more architectural restrictions.
 11. The system of claim 8, wherein the at least one processor is configured to detect and localize the fault based at least in part on the second set of execution results by executing the computer-executable instructions to: determine that a first new test case failed execution; determine that a first attribute having a first original attribute value in the selected failing test case that was changed to obtain the first new test case does not contribute to the fault; determine that a second new test case and a third new test case each successfully executed; determine a second attribute having a second original attribute value in the selected failing test case that was changed to generate the second new test case; determine a third attribute having a third original attribute value in the selected failing test case that was changed to generate the third new test case; and determine that the second original attribute value and the third original attribute value contribute to the fault.
 12. The system of claim 11, wherein the at least one processor is configured to detect and localize the fault based at least in part on the second set of execution results by executing the computer-executable instructions to determine a particular combination of attribute values that causes the fault.
 13. The system of claim 12, wherein the at least one processor is further configured to execute computer-executable instructions to: generate a regression bucket of failing test cases based at least in part on the particular combination of attribute values that causes the fault, wherein generating the regression bucket comprises: determining all combinations in the Cartesian product space that include the particular combination of attribute values that causes the fault; and generating, for inclusion in the regression bucket, a respective failing test case for each combination in the Cartesian product space that includes the particular combination of attribute values that causes the fault; and exclude, from the regression bucket, one or more failing test cases that violate at least one of the one or more architectural restrictions.
 14. The system of claim 12, wherein the at least one processor is further configured to execute the computer-executable instructions to: generate a regression bucket of failing test cases based at least in part on the particular combination of attribute values that causes the fault, wherein generating the regression bucket comprises: determining all combinations in the reduced test space that include the particular combination of attribute values that causes the fault; and generating, for inclusion in the regression bucket, a respective failing test case for each combination in the reduced test space that includes the particular combination of attribute values that causes the fault.
 15. A computer program product for detecting and localizing a fault in a System Under Test (SUT) while adhering to one or more architectural restrictions on the SUT, the computer program product comprising a storage medium readable by a processing circuit, the storage medium storing instructions executable by the processing circuit to cause a method to be performed, the method comprising: modeling inputs to the SUT as a collection of attribute-value pairs; reducing a Cartesian product space comprising all possible combinations of the attribute-value pairs to a reduced test space at least in part by excluding one or more combinations of attribute-value pairs that violate at least one of the one or more architectural restrictions; generating an initial set of test vectors that provides complete n-wise coverage of the reduced test space; generating an initial set of test cases from the initial set of test vectors; executing the initial set of test cases to obtain a first set of execution results; determining, based at least in part on the first set of execution results, that one or more test cases failed execution; generating a set of new test cases from a selected failing test case, wherein generating the set of new test cases comprises generating, in relation to each attribute in the selected failing test case, a respective subset of new test cases at least in part by changing a respective attribute value for the attribute in the selected failing test case to each other candidate attribute value for the attribute that is not present in any of the one or more test cases that failed execution; executing the set of new test cases to obtain a second set of execution results; and detecting and localizing the fault based at least in part on the second set of execution results.
 16. The computer program product of claim 15, the method further comprising excluding, from the set of new test cases, one or more new test cases that violate at least one of the one or more architectural restrictions.
 17. The computer program product of claim 15, wherein detecting and localizing the fault based at least in part on the second set of execution results comprises: determining that a first new test case failed execution; determining that a first attribute having a first original attribute value in the selected failing test case that was changed to obtain the first new test case does not contribute to the fault; determining that a second new test case and a third new test case each successfully executed; determining a second attribute having a second original attribute value in the selected failing test case that was changed to generate the second new test case; determining a third attribute having a third original attribute value in the selected failing test case that was changed to generate the third new test case; and determining that the second original attribute value and the third original attribute value contribute to the fault.
 18. The computer program product of claim 15, wherein detecting and localizing the fault based at least in part on the second set of execution results comprises determining a particular combination of attribute values that causes the fault.
 19. The computer program product of claim 18, the method further comprising: generating a regression bucket of failing test cases based at least in part on the particular combination of attribute values that causes the fault, wherein generating the regression bucket comprises: determining all combinations in the Cartesian product space that include the particular combination of attribute values that causes the fault; and generating, for inclusion in the regression bucket, a respective failing test case for each combination in the Cartesian product space that includes the particular combination of attribute values that causes the fault; and excluding, from the regression bucket, one or more failing test cases that violate at least one of the one or more architectural restrictions.
 20. The computer program product of claim 18, the method further comprising generating a regression bucket of failing test cases based at least in part on the particular combination of attribute values that causes the fault, wherein generating the regression bucket comprises: determining all combinations in the reduced test space that include the particular combination of attribute values that causes the fault; and generating, for inclusion in the regression bucket, a respective failing test case for each combination in the reduced test space that includes the particular combination of attribute values that causes the fault. 